$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5e0d86e-0f74-41d8-a413-497ad79e414d.roa File: b5e0d86e-0f74-41d8-a413-497ad79e414d.roa (raw, json) Hash identifier: E/qUN07rPGLsIkVGT9ACTnQ+LYuD2QymWxsQzHZ37x0= Subject key identifier: 6B:CB:97:42:E2:08:CA:BC:D8:37:1E:B8:0D:EA:0F:D6:44:15:F8:85 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 4C1FD7441E2F076F283553ED2CC85D8D2C53ABBD Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5e0d86e-0f74-41d8-a413-497ad79e414d.roa Signing time: Sat 19 Jul 2025 00:00:08 +0000 ROA not before: Sat 19 Jul 2025 00:00:08 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.221.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:1f:d7:44:1e:2f:07:6f:28:35:53:ed:2c:c8:5d:8d:2c:53:ab:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 19 00:00:08 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=c544a81de7b8fc84ce7e7eee2a613c63590c58a1492cced43771446836b2fbe8, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dc:15:0f:f0:40:2e:98:24:2a:37:b6:41:99: 4a:18:86:c1:18:51:be:65:0a:a0:ac:9a:a9:64:53: 2b:80:2e:45:55:87:12:fd:83:73:dd:a4:c3:62:d1: ad:65:e7:40:19:f2:73:71:7d:6a:7b:22:40:f6:dd: 84:e5:ea:e1:0f:94:d3:56:6e:e5:61:8f:58:0a:c9: 18:57:bf:3c:ef:0b:05:0c:66:4b:e7:a7:e9:bc:e1: 71:fa:b5:a9:6f:5e:5d:f6:7a:ff:27:0a:e0:64:46: d4:41:d8:11:d0:54:a9:43:6c:63:75:d5:d8:90:3c: 6c:b2:28:0a:41:f3:cc:71:e9:7b:7c:ba:8b:d8:9c: 76:f8:ec:5b:d0:6d:37:db:81:86:4a:c3:32:ed:43: 37:9f:61:16:4f:ea:ff:29:1d:c1:fe:a5:af:c9:e7: 9f:36:6e:f9:bc:d6:8a:e6:04:51:9d:0b:f9:f9:0d: fd:b1:fd:a5:c5:47:75:32:f5:93:62:5b:d8:ad:3d: 33:84:3e:63:dd:b4:d7:f0:7d:b4:69:58:11:56:bc: 44:46:3d:03:e2:cb:bc:c9:a6:20:ca:c6:c1:dc:b6: 7f:4b:e3:a6:71:ee:eb:34:3a:9e:91:f7:9b:ed:73: 70:15:78:ed:b9:da:1c:61:6a:98:4a:d8:ea:2e:72: 17:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CB:97:42:E2:08:CA:BC:D8:37:1E:B8:0D:EA:0F:D6:44:15:F8:85 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5e0d86e-0f74-41d8-a413-497ad79e414d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.160.0/19 Signature Algorithm: sha256WithRSAEncryption 48:3e:b0:d5:33:ff:12:72:96:72:cf:ec:9f:c8:f5:ab:4f:1b: f0:5e:3f:e9:ab:60:39:69:70:bb:26:79:e3:c5:6c:dd:52:de: 60:83:02:a9:5a:ed:28:cf:3d:9b:fb:60:1c:fa:7d:68:c1:81: f9:3d:44:fb:ed:64:9d:86:64:cc:c2:ed:4f:51:10:94:22:99: ee:29:4c:e9:e9:21:71:2e:48:5c:0b:b6:b6:40:09:5d:ff:b4: 9f:71:fa:60:1d:9a:36:33:7d:10:70:d3:cc:55:93:89:8e:57: c2:8f:15:7a:c6:d7:8e:90:77:de:c7:bf:6d:93:3c:e8:6d:1c: 7f:18:34:75:ab:2e:86:dc:43:51:25:5c:6d:9e:62:ea:00:77: e0:9e:43:9f:30:2a:c5:b9:4b:ae:0b:97:93:62:9e:1a:50:b9: b5:4b:7a:fc:dd:e5:0d:8d:fc:a5:fc:e1:a6:0c:cf:a9:5a:ef: 46:e1:c4:03:6e:24:c6:46:dd:c5:e4:12:b9:8a:a6:03:c5:b4: ac:a6:c4:f9:d7:a3:47:3b:77:e3:29:90:76:90:a6:e2:fb:cd: d7:b0:36:ca:00:f1:39:09:27:5a:49:78:6f:45:45:26:9f:7d: b4:c4:96:b4:53:81:37:b9:54:d9:54:35:2e:bd:a4:6c:f7:75: 59:71:2f:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTB/XRB4vB28oNVPtLMhdjSxTq70wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzE5MDAwMDA4WhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNTQ0YTgxZGU3YjhmYzg0Y2U3ZTdlZWUyYTYxM2M2MzU5 MGM1OGExNDkyY2NlZDQzNzcxNDQ2ODM2YjJmYmU4MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDf3BUP8EAumCQqN7ZBmUoYhsEYUb5lCqCsmqlkUyuALkVV hxL9g3PdpMNi0a1l50AZ8nNxfWp7IkD23YTl6uEPlNNWbuVhj1gKyRhXvzzvCwUM Zkvnp+m84XH6talvXl32ev8nCuBkRtRB2BHQVKlDbGN11diQPGyyKApB88xx6Xt8 uovYnHb47FvQbTfbgYZKwzLtQzefYRZP6v8pHcH+pa/J5582bvm81ormBFGdC/n5 Df2x/aXFR3Uy9ZNiW9itPTOEPmPdtNfwfbRpWBFWvERGPQPiy7zJpiDKxsHctn9L 46Zx7us0Op6R95vtc3AVeO252hxhaphK2Oouchc7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUa8uXQuIIyrzYNx64DeoP1kQV+IUwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2I1ZTBkODZlLTBmNzQtNDFkOC1hNDEzLTQ5N2FkNzllNDE0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXY3aAwDQYJKoZIhvcNAQELBQADggEBAEg+sNUz/xJylnLP7J/I9atPG/Be P+mrYDlpcLsmeePFbN1S3mCDAqla7SjPPZv7YBz6fWjBgfk9RPvtZJ2GZMzC7U9R EJQime4pTOnpIXEuSFwLtrZACV3/tJ9x+mAdmjYzfRBw08xVk4mOV8KPFXrG146Q d97Hv22TPOhtHH8YNHWrLobcQ1ElXG2eYuoAd+CeQ58wKsW5S64Ll5NinhpQubVL evzd5Q2N/KX84aYMz6la70bhxANuJMZG3cXkErmKpgPFtKymxPnXo0c7d+MpkHaQ puL7zdewNsoA8TkJJ1pJeG9FRSaffbTElrRTgTe5VNlUNS69pGz3dVlxL6w= -----END CERTIFICATE-----Generated at Tue Jul 22 11:50:36 2025 by rpki-client